$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/2A4D3504E07C11F09FEE3C963A6F56BC.roa File: 2A4D3504E07C11F09FEE3C963A6F56BC.roa (raw, json) Hash identifier: UntSuUcwtyJ77xVYyS6MfbXY4tEi74nmB+geh7OQmlM= Subject key identifier: C4:07:5F:39:DF:B9:9F:41:7F:88:E5:F0:3C:10:99:C1:3C:FC:9B:60 Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 0BF0 Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/2A4D3504E07C11F09FEE3C963A6F56BC.roa Signing time: Thu 02 Apr 2026 20:22:50 +0000 ROA not before: Thu 02 Apr 2026 20:22:50 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 142115 IP address blocks: 61.15.109.0/24 maxlen: 24 222.167.41.0/24 maxlen: 24 222.167.42.0/23 maxlen: 23 222.167.44.0/22 maxlen: 22 222.167.64.0/19 maxlen: 24 222.167.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3056 (0xbf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Validity Not Before: Apr 2 20:22:50 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69ced01a-a308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:07:5b:e8:44:15:82:e5:d4:fb:c2:32:66:8e: c0:1c:79:3e:9c:fa:2a:e4:69:e4:2b:b1:32:8e:11: 40:33:de:c0:8b:b0:76:e2:64:a0:17:0e:c4:c6:c7: c7:f2:73:27:b1:4d:b1:c1:29:85:fd:0a:1f:fb:f6: d3:59:40:2c:bd:72:d8:d9:58:1b:80:8a:33:52:74: af:03:56:03:e2:b1:dc:c9:bc:b7:93:17:82:36:a8: 39:62:a3:59:96:cf:23:1d:b1:6b:35:b5:c9:bd:2c: e4:28:5f:9b:2d:21:2f:a1:e8:93:fb:3c:20:a0:0e: eb:36:4a:43:ea:6b:2f:f6:24:55:10:10:43:e9:89: 6a:cd:8c:6e:6c:3a:e5:0e:38:12:c1:83:8a:d0:c5: e3:aa:6f:aa:6f:39:b8:ae:bd:c5:15:ef:0f:1f:1f: 1c:3e:70:97:5e:35:5e:dd:66:46:e5:ac:ad:76:0b: 32:35:4f:44:10:d2:9a:dc:14:0c:7a:0b:bf:78:1c: 23:4b:ae:bf:67:d2:71:fc:cb:ad:14:c6:d0:5f:d6: 34:84:78:4a:62:73:30:53:84:d5:a4:e4:2f:c1:64: f4:55:c9:c9:5a:84:1d:89:f7:0e:cf:d2:22:ad:d3: b5:7d:69:fb:32:75:19:8e:5c:c7:ed:f4:a2:e3:a9: 71:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:07:5F:39:DF:B9:9F:41:7F:88:E5:F0:3C:10:99:C1:3C:FC:9B:60 X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/2A4D3504E07C11F09FEE3C963A6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 61.15.109.0/24 222.167.41.0-222.167.47.255 222.167.64.0/19 222.167.160.0/19 Signature Algorithm: sha256WithRSAEncryption 46:22:31:fa:85:0a:73:0e:12:14:0d:d7:6a:b2:7d:60:f4:ab: 31:ff:cc:26:0b:67:dd:f3:b7:32:b0:b5:f1:ea:e7:65:ca:23: 7b:47:42:ab:ba:13:04:f4:d4:3e:71:d6:e7:0b:86:97:76:47: a7:e2:c4:a9:83:cb:61:d0:0f:c6:9e:39:35:a4:6d:9b:51:d9: d7:7f:3e:a3:45:19:14:dd:cd:26:9f:b9:26:11:6a:35:70:c8: 50:9d:5a:4f:ee:45:68:e1:fa:87:08:90:07:ca:ac:3a:d9:51: 6f:87:8a:8c:d4:f2:39:97:f7:9f:37:5d:b4:9e:d2:bf:2f:20: 11:b0:06:c8:ab:22:98:57:53:8e:3d:ce:ec:5d:65:47:ab:43: bf:ce:78:ff:06:fc:3f:e0:0d:6c:96:6c:ef:1a:bb:f1:a4:0a: 6d:28:d9:7e:f7:ed:f9:30:d8:84:41:d3:82:ec:48:a6:c4:25: 16:02:b3:7f:5e:32:37:3e:ba:2e:a3:d3:1a:da:4e:1c:43:0a: e2:65:f9:14:e6:ee:9b:7c:16:8a:f5:77:c7:53:ee:59:c1:db: 70:48:37:e9:e8:be:a0:80:a9:95:32:a8:03:bc:d3:f0:b4:28: a5:11:36:9b:70:28:a0:85:12:cc:ef:a0:29:d5:9d:0f:5c:33: 3e:ec:a2:04 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICC/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjYwNDAyMjAyMjUwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNlZDAxYS1hMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmgdb6EQVguXU+8IyZo7AHHk+nPoq5GnkK7EyjhFAM97Ai7B24mSgFw7ExsfH 8nMnsU2xwSmF/Qof+/bTWUAsvXLY2VgbgIozUnSvA1YD4rHcyby3kxeCNqg5YqNZ ls8jHbFrNbXJvSzkKF+bLSEvoeiT+zwgoA7rNkpD6msv9iRVEBBD6YlqzYxubDrl DjgSwYOK0MXjqm+qbzm4rr3FFe8PHx8cPnCXXjVe3WZG5aytdgsyNU9EENKa3BQM egu/eBwjS66/Z9Jx/MutFMbQX9Y0hHhKYnMwU4TVpOQvwWT0VcnJWoQdifcOz9Ii rdO1fWn7MnUZjlzH7fSi46lxCQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFMQHXznf uZ9Bf4jl8DwQmcE8/JtgMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvMkE0RDM1MDRF MDdDMTFGMDlGRUUzQzk2M0E2RjU2QkMucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQAPQ9tMAwDBADepykDBATepyADBAXep0ADBAXep6AwDQYJKoZIhvcN AQELBQADggEBAEYiMfqFCnMOEhQN12qyfWD0qzH/zCYLZ93ztzKwtfHq52XKI3tH Qqu6EwT01D5x1ucLhpd2R6fixKmDy2HQD8aeOTWkbZtR2dd/PqNFGRTdzSafuSYR ajVwyFCdWk/uRWjh+ocIkAfKrDrZUW+HiozU8jmX9583XbSe0r8vIBGwBsirIphX U449zuxdZUerQ7/OeP8G/D/gDWyWbO8au/GkCm0o2X737fkw2IRB04LsSKbEJRYC s39eMjc+ui6j0xraThxDCuJl+RTm7pt8For1d8dT7lnB23BIN+novqCAqZUyqAO8 0/C0KKURNptwKKCFEszvoCnVnQ9cMz7sogQ= -----END CERTIFICATE-----Generated at Fri Apr 17 16:58:14 2026 by rpki-client